CSP Suborigins

Source/platform/weborigin/SecurityOriginTest.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 13 matching lines @@
  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "config.h"
 #include "platform/weborigin/SecurityOrigin.h"
 
+#include "platform/RuntimeEnabledFeatures.h"
 #include "platform/weborigin/KURL.h"
 #include <gtest/gtest.h>
 
 using blink::SecurityOrigin;
 
 namespace {
 
 const int MaxAllowedPort = 65535;
 
 TEST(SecurityOriginTest, InvalidPortsCreateUniqueOrigins)
@@ skipping 88 matching lines @@
         EXPECT_EQ(inputs[i].accessGranted, errorMessage.isEmpty());
     }
 
     // Unique origins are not considered secure.
     RefPtr<SecurityOrigin> uniqueOrigin = SecurityOrigin::createUnique();
     String errorMessage;
     EXPECT_FALSE(uniqueOrigin->canAccessFeatureRequiringSecureOrigin(errorMessage));
     EXPECT_EQ("Only secure origins are allowed. http://goo.gl/lq4gCo", errorMessage);
 }
 
+TEST(SecurityOriginTest, Suborigins)
+{
+    blink::RuntimeEnabledFeatures::setSuboriginsEnabled(true);
+
+    RefPtr<SecurityOrigin> origin = SecurityOrigin::createFromString("https://test.com");
+    EXPECT_FALSE(origin->hasSuborigin());
+    origin->addSuborigin("foobar");
+    EXPECT_TRUE(origin->hasSuborigin());
+    EXPECT_EQ("foobar", origin->suboriginName());
+
+    origin = SecurityOrigin::createFromString("suborigin+foobar+https://test.com");
+    EXPECT_TRUE(origin->hasSuborigin());
+    EXPECT_EQ("foobar", origin->suboriginName());
+
+    origin = SecurityOrigin::createFromString("sborigin+foobar+https://test.com");
+    EXPECT_FALSE(origin->hasSuborigin());
+
+    origin = SecurityOrigin::createFromString("+foobar+https://test.com");
+    EXPECT_FALSE(origin->hasSuborigin());
+
+    origin = SecurityOrigin::createFromString("suborigin++https://test.com");
+    EXPECT_FALSE(origin->hasSuborigin());
+
+    origin = SecurityOrigin::createFromString("suborigin+https://test.com");
+    EXPECT_FALSE(origin->hasSuborigin());
+
+    origin = SecurityOrigin::createFromString("suborigin+foobar+https://test.com");
+    EXPECT_DEATH(origin->addSuborigin("shouldhitassert"), "");
+
+    origin = SecurityOrigin::createFromString("https://test.com");
+    RefPtr<SecurityOrigin> suborigin1 = SecurityOrigin::createFromString("suborigin+foobar+https://test.com");
+    RefPtr<SecurityOrigin> suborigin2 = SecurityOrigin::createFromString("suborigin+bazbar+https://test.com");
+    EXPECT_TRUE(suborigin1->canAccess(suborigin1.get()));
+    EXPECT_FALSE(origin->canAccess(suborigin1.get()));
+    EXPECT_FALSE(suborigin1->canAccess(origin.get()));
+    EXPECT_FALSE(suborigin1->canAccess(suborigin2.get()));

[Mike West, 2015/04/13 10:03:35]

Nit: I'd suggest splitting `canAccess` and `canRequest` into separate unit
tests, just for clarity.

+
+    EXPECT_TRUE(suborigin1->canRequest(blink::KURL(blink::KURL(), suborigin1->toString())));
+    EXPECT_FALSE(origin->canRequest(blink::KURL(blink::KURL(), suborigin1->toString())));
+    EXPECT_FALSE(suborigin1->canRequest(blink::KURL(blink::KURL(), origin->toString())));
+    EXPECT_FALSE(suborigin1->canRequest(blink::KURL(blink::KURL(), suborigin2->toString())));
+
+    origin = SecurityOrigin::createFromString("suborigin+foobar+https://test.com");
+    EXPECT_FALSE(origin->canShowNotifications());
+}
+
 } // namespace